URL User Request GET HTTP/1.1IP 146.112.255.155:80
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET / HTTP/1.1
Host: internetbadguys.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 302 Found
location: http://www.internetbadguys.com/
content-length: 0
content-type: text/html; charset=UTF-8
date: Tue, 16 Apr 2024 17:59:55 GMT
server: opendns
x-envoy-upstream-service-time: 2
x-ingress-point: sto1
x-xss-protection: 1; mode=block
strict-transport-security: max-age=31536000; includeSubDomains
|
URL User Request GET HTTP/1.1IP146.112.255.155:80
File typeHTML document, ASCII text Hash4434e1bf4d7eb4eca7f3575f03f3ee61 942c75ad5b5c5356476b9378ff8ad79734f02ac5 2e16ecad5a99a5bd938969e9c80cc02cd9efbc540e915184cfeaa7742c4f2d6b
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET / HTTP/1.1
Host: www.internetbadguys.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
vary: Accept-Encoding
content-encoding: gzip
content-length: 1245
content-type: text/html; charset=UTF-8
date: Tue, 16 Apr 2024 17:59:55 GMT
server: opendns
x-envoy-upstream-service-time: 1
x-ingress-point: sto1
x-xss-protection: 1; mode=block
strict-transport-security: max-age=31536000; includeSubDomains
|
| www.internetbadguys.com/opendns.gif | 146.112.255.155 | 200 OK | 2.5 kB |
URL GET HTTP/1.1www.internetbadguys.com/opendns.gif IP146.112.255.155:80
Requested byhttp://www.internetbadguys.com/
File typeGIF image data, version 89a, 93 x 37 Hashf71708cb9d77777f0cda5b703fa18815 71ec8b0e5335b4bc9a788136e2bc67167de22395 2882773e21bd3f9f736e5837fab10b9607219e080b2cbd5e013b89f5177c3379
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /opendns.gif HTTP/1.1
Host: www.internetbadguys.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://www.internetbadguys.com/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
last-modified: Tue, 16 Apr 2024 12:03:24 GMT
etag: "9a5-6163586635b00"
accept-ranges: bytes
content-length: 2469
content-type: image/gif
date: Tue, 16 Apr 2024 17:59:55 GMT
server: opendns
x-envoy-upstream-service-time: 3
x-ingress-point: sto1
x-xss-protection: 1; mode=block
strict-transport-security: max-age=31536000; includeSubDomains
|
| www.internetbadguys.com/favicon.ico | 146.112.255.155 | 404 Not Found | 196 B |
URL GET HTTP/1.1www.internetbadguys.com/favicon.ico IP146.112.255.155:80
Requested byhttp://www.internetbadguys.com/
File typeHTML document, ASCII text Hash62962daa1b19bbcc2db10b7bfd531ea6 d64bae91091eda6a7532ebec06aa70893b79e1f8 80c3fe2ae1062abf56456f52518bd670f9ec3917b7f85e152b347ac6b6faf880
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /favicon.ico HTTP/1.1
Host: www.internetbadguys.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://www.internetbadguys.com/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 404 Not Found
content-length: 196
content-type: text/html; charset=iso-8859-1
date: Tue, 16 Apr 2024 17:59:55 GMT
server: opendns
x-envoy-upstream-service-time: 0
x-ingress-point: sto1
x-xss-protection: 1; mode=block
strict-transport-security: max-age=31536000; includeSubDomains
|